CVE-2017-15804

Public on 2017-10-22
Modified on 2018-08-08
Description
The glob function in glob.c in the GNU C Library (aka glibc or libc6) before 2.27 contains a buffer overflow during unescaping of user names with the ~ operator.
Severity
Medium severity
Medium
See what this means
CVSS v3 Base Score
5.5
See breakdown

Affected Packages

Platform Package Release Date Advisory Status
Amazon Linux 1 glibc 2018-05-10 ALAS-2018-1017 Fixed
Amazon Linux 2 - Core glibc 2018-07-24 ALAS2-2018-1048 Fixed

CVSS Scores

Score Type Score Vector
Amazon Linux CVSSv3 5.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References

FAQs regarding Amazon Linux ALAS/CVE Severity Red Hat: CVE-2017-15804 Mitre: CVE-2017-15804